This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
File:                     gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json)
Hash identifier:          myFRxMLg0ctsNpPWGiGjvqwkzBLSlbHKDpdU62BFfp0=
Subject key identifier:   55:03:FB:BE:2C:5F:1D:19:00:70:91:B5:D1:7D:24:14:76:7E:EE:B4
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Certificate issuer:       /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial:       35FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
Manifest number:          3553
Signing time:             Thu 04 Dec 2025 14:38:48 +0000
Manifest this update:     Thu 04 Dec 2025 14:38:47 +0000
Manifest next update:     Thu 11 Dec 2025 14:38:47 +0000
Files and hashes:         1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: j+y3RVvYQ58rhcKr+MezMpCXlrg1CQDNqTflwy3chDI=)
                          2: 8C7BC30E5B7E11F0AA42172EC4F9AE02.roa (hash: T4ooPvrdLBAfiayLnI4MRWTb1Jb1klBjv7+Ml585mqQ=)
                          3: 24108E38125C11EFA53AA21EC4F9AE02.roa (hash: VqM+TAIOBknioMAJ/ATM6gx0sTDGMk2zuwyk43OpKzI=)
                          4: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: 2jXUTHIbe/4zB55x5aVqbJ++TpfrSTqoaosirfZlKp4=)
                          5: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: kC85zV9vfowONrQ/4lH4osyAc/gnJivigTW1tOC5o5I=)
                          6: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: MUiCEFkOTO4FtkjvpufTX4GTFRhCPjdetQYvgSwrwG0=)
                          7: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: 7vOKeyVZ+3C3IU2Q2LWPiPgpmUgrqFfYYBhoSV6xIdA=)
                          8: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: tmtO11OOtDriXyiX8yIjjm/tLba1skzLPKICGtpamPs=)
                          9: 7D883CF033F911E98674843BC4F9AE02.roa (hash: kvRz79x323/sz1CS5sLMmHqk7HExlk2aKA5DVgo+je4=)
                          10: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: cjk5XxryDCD9iYNOdFDhTcqSurq/6QehBRcXynDGfWE=)
                          11: A8689054340411E9A22CD05CC4F9AE02.roa (hash: 9Abm2hwP5n1eigQRbM/2Ald4kJwUC5p7xAvKRar2kxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 14:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13820 (0x35fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
        Validity
            Not Before: Dec  4 14:38:47 2025 GMT
            Not After : Dec 11 14:38:47 2025 GMT
        Subject: CN=69319cf7-a9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5d:c9:62:5a:fc:ac:29:8c:7e:4f:dc:ab:6d:
                    ef:59:d4:68:40:91:77:82:80:84:dc:73:2a:5c:00:
                    31:6b:f5:45:bd:c0:93:71:27:9e:fb:0e:1d:ea:23:
                    be:65:b7:6f:e6:2b:1b:5f:9d:e0:cc:7c:de:61:22:
                    b1:b1:82:66:87:42:68:9c:ea:15:41:24:d6:49:b6:
                    8f:f8:20:98:75:ad:aa:ca:d4:d5:12:48:0f:02:fc:
                    d3:95:5d:21:b5:d9:bb:97:03:49:97:1c:59:07:5f:
                    98:11:3a:0a:b9:3e:c9:ee:b3:00:29:34:3e:35:66:
                    0f:0b:84:65:55:f4:fb:77:a9:b6:c4:33:d2:4d:1f:
                    22:3b:3e:06:59:e0:31:16:bd:b1:11:81:a4:b4:84:
                    aa:a9:05:6a:b9:4e:9c:2e:7d:c1:b7:4a:51:09:9c:
                    74:73:65:9f:4b:8a:f1:5a:75:14:a4:7e:13:a8:82:
                    ba:61:33:90:18:52:4d:14:43:7f:a7:a2:ac:0d:48:
                    85:95:38:0b:87:2c:e6:35:f9:cb:5c:19:95:c1:7e:
                    fd:51:37:30:0c:ac:fd:d9:c4:20:8c:dc:51:3d:e2:
                    61:4c:87:72:b4:65:e5:9a:dd:74:3b:11:eb:ee:e8:
                    b8:5d:b4:77:e4:2c:64:79:18:06:ac:0b:fd:ac:8e:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:03:FB:BE:2C:5F:1D:19:00:70:91:B5:D1:7D:24:14:76:7E:EE:B4
            X509v3 Authority Key Identifier:
                keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f7:90:97:c2:2a:63:cb:70:c2:b7:9a:17:90:03:3e:71:88:
         dd:6e:4e:69:c1:06:da:92:6b:9e:cf:31:db:47:9a:58:cc:57:
         4f:35:1e:a7:93:02:30:9c:47:6d:f4:fa:3d:bc:77:ad:59:52:
         70:d5:c6:a0:c5:09:e6:5c:e8:d8:0c:4d:23:97:12:17:82:15:
         dc:0d:42:56:a7:57:8c:54:7d:c0:bd:4e:a8:37:50:77:4b:a5:
         6a:64:56:4b:21:62:4e:f5:d1:15:54:30:e5:03:de:83:b2:20:
         77:08:84:4b:a0:5a:6b:20:63:73:ac:3f:a1:a7:c7:41:e8:8b:
         dd:f9:49:35:ac:e5:da:a6:ef:51:e7:b1:47:2e:d3:91:1c:56:
         4c:3c:b1:bb:24:82:34:74:42:d8:12:c2:21:92:3b:2b:f4:08:
         48:ab:b4:27:d6:c4:b0:33:4f:9c:21:7f:e1:48:97:6f:cb:af:
         a3:cc:71:04:d5:37:a2:0f:9b:19:d8:ec:1f:fb:20:95:b0:35:
         02:53:d1:a0:ac:e0:bf:06:57:84:21:13:d1:84:91:11:9e:ce:
         66:db:e0:49:8d:15:81:fb:ec:eb:e7:c7:77:f4:0b:1e:df:7a:
         24:64:e3:58:04:3a:f7:a7:ab:1f:9a:3f:10:c6:43:4a:90:02:
         05:2a:be:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:32 2025 by rpki-client